Returning 10 result(s) out of 21 in 0.099 second(s)

  • 210.101.109.70:4899 (tcp/http) - last seen on 2024-11-06 at 16:30:27 UTC

    • IP
      210.101.109.70
      Network
      210.101.64.0/18
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      SonicWall SonicOS
      URL

      http://210.101.109.70:4899/ 302

      HTTP Title
      Policy Jump
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      SonicWall SonicOS
      HTTP Component(s)
      SonicWall SonicWall
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      8332030c845aaae05eb386bea74678a0
      HTTP Header MD5
      abacb902cd555996ea7c81367d39d2cf
      HTTP Body MD5
      7f437575f8c2fc5ea0b8a911e38bf0f9
    • HTTP/1.0 302 Found
      Content-type: text/html
      X-Content-Type-Options: nosniff
      Location: https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
      <html>
      <head><meta http-equiv="Content-Type" content="text/html; charset=utf-8">
      
      	<title>Policy Jump</title>
      	<meta name="id" content="policyJump" >
      	<meta http-equiv="Expires" content="0">
      </head>
      <BODY>This document has moved <A href="https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0">here</A></BODY>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-06T16:30:27.000Z",
         "app" : {
            "extract" : {
               "ip" : [
                  "210.101.110.254"
               ],
               "url" : [
                  "https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0"
               ]
            },
            "http" : {
               "bodymd5" : "7f437575f8c2fc5ea0b8a911e38bf0f9",
               "bodymmh3" : -626897434,
               "component" : [
                  {
                     "productvendor" : "SonicWall",
                     "product" : "SonicWall"
                  }
               ],
               "headermd5" : "abacb902cd555996ea7c81367d39d2cf",
               "headermmh3" : -109501120,
               "title" : "Policy Jump"
            },
            "length" : 547
         },
         "asn" : "AS4766",
         "city" : "Buk-gu",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 302 Found\r\nContent-type: text/html\r\nX-Content-Type-Options: nosniff\r\nLocation: https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\">\r\n<html>\r\n<head><meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">\r\n\r\n\t<title>Policy Jump</title>\r\n\t<meta name=\"id\" content=\"policyJump\" >\r\n\t<meta http-equiv=\"Expires\" content=\"0\">\r\n</head>\r\n<BODY>This document has moved <A href=\"https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0\">here</A></BODY>\r\n</html>\r\n",
         "datamd5" : "8332030c845aaae05eb386bea74678a0",
         "datammh3" : 1436404183,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "210.101.64.0/18"
         },
         "ip" : "210.101.109.70",
         "ipv6" : "false",
         "latitude" : "35.9616",
         "location" : "35.9616,128.5413",
         "longitude" : "128.5413",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "SonicOS",
         "osvendor" : "SonicWall",
         "port" : 4899,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "Found",
         "seen_date" : "2024-11-06",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "210.101.64.0/18",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 221.153.131.24:4899 (tcp/http) - last seen on 2024-11-05 at 02:55:56 UTC

    • IP
      221.153.131.24
      Network
      221.152.0.0/14
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      SonicWall SonicOS
      URL

      http://221.153.131.24:4899/ 302

      HTTP Title
      Policy Jump
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      SonicWall SonicOS
      HTTP Component(s)
      SonicWall SonicWall
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      8332030c845aaae05eb386bea74678a0
      HTTP Header MD5
      abacb902cd555996ea7c81367d39d2cf
      HTTP Body MD5
      7f437575f8c2fc5ea0b8a911e38bf0f9
    • HTTP/1.0 302 Found
      Content-type: text/html
      X-Content-Type-Options: nosniff
      Location: https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
      <html>
      <head><meta http-equiv="Content-Type" content="text/html; charset=utf-8">
      
      	<title>Policy Jump</title>
      	<meta name="id" content="policyJump" >
      	<meta http-equiv="Expires" content="0">
      </head>
      <BODY>This document has moved <A href="https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0">here</A></BODY>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-05T02:55:56.000Z",
         "app" : {
            "extract" : {
               "ip" : [
                  "210.101.110.254"
               ],
               "url" : [
                  "https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0"
               ]
            },
            "http" : {
               "bodymd5" : "7f437575f8c2fc5ea0b8a911e38bf0f9",
               "bodymmh3" : -626897434,
               "component" : [
                  {
                     "product" : "SonicWall",
                     "productvendor" : "SonicWall"
                  }
               ],
               "headermd5" : "abacb902cd555996ea7c81367d39d2cf",
               "headermmh3" : -109501120,
               "title" : "Policy Jump"
            },
            "length" : 547
         },
         "asn" : "AS4766",
         "city" : "Suwon",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 302 Found\r\nContent-type: text/html\r\nX-Content-Type-Options: nosniff\r\nLocation: https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\">\r\n<html>\r\n<head><meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">\r\n\r\n\t<title>Policy Jump</title>\r\n\t<meta name=\"id\" content=\"policyJump\" >\r\n\t<meta http-equiv=\"Expires\" content=\"0\">\r\n</head>\r\n<BODY>This document has moved <A href=\"https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0\">here</A></BODY>\r\n</html>\r\n",
         "datamd5" : "8332030c845aaae05eb386bea74678a0",
         "datammh3" : 1436404183,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "221.152.0.0/14"
         },
         "ip" : "221.153.131.24",
         "ipv6" : "false",
         "latitude" : "37.2608",
         "location" : "37.2608,127.0281",
         "longitude" : "127.0281",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "SonicOS",
         "osvendor" : "SonicWall",
         "port" : 4899,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "Found",
         "seen_date" : "2024-11-05",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "221.152.0.0/14",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 210.101.109.75:4899 (tcp/http) - last seen on 2024-11-04 at 13:36:45 UTC

    • IP
      210.101.109.75
      Network
      210.101.64.0/18
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      SonicWall SonicOS
      URL

      http://210.101.109.75:4899/ 302

      HTTP Title
      Policy Jump
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      SonicWall SonicOS
      HTTP Component(s)
      SonicWall SonicWall
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      8332030c845aaae05eb386bea74678a0
      HTTP Header MD5
      abacb902cd555996ea7c81367d39d2cf
      HTTP Body MD5
      7f437575f8c2fc5ea0b8a911e38bf0f9
    • HTTP/1.0 302 Found
      Content-type: text/html
      X-Content-Type-Options: nosniff
      Location: https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
      <html>
      <head><meta http-equiv="Content-Type" content="text/html; charset=utf-8">
      
      	<title>Policy Jump</title>
      	<meta name="id" content="policyJump" >
      	<meta http-equiv="Expires" content="0">
      </head>
      <BODY>This document has moved <A href="https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0">here</A></BODY>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-04T13:36:45.000Z",
         "app" : {
            "extract" : {
               "ip" : [
                  "210.101.110.254"
               ],
               "url" : [
                  "https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0"
               ]
            },
            "http" : {
               "bodymd5" : "7f437575f8c2fc5ea0b8a911e38bf0f9",
               "bodymmh3" : -626897434,
               "component" : [
                  {
                     "product" : "SonicWall",
                     "productvendor" : "SonicWall"
                  }
               ],
               "headermd5" : "abacb902cd555996ea7c81367d39d2cf",
               "headermmh3" : -109501120,
               "title" : "Policy Jump"
            },
            "length" : 547
         },
         "asn" : "AS4766",
         "city" : "Buk-gu",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 302 Found\r\nContent-type: text/html\r\nX-Content-Type-Options: nosniff\r\nLocation: https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\">\r\n<html>\r\n<head><meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">\r\n\r\n\t<title>Policy Jump</title>\r\n\t<meta name=\"id\" content=\"policyJump\" >\r\n\t<meta http-equiv=\"Expires\" content=\"0\">\r\n</head>\r\n<BODY>This document has moved <A href=\"https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0\">here</A></BODY>\r\n</html>\r\n",
         "datamd5" : "8332030c845aaae05eb386bea74678a0",
         "datammh3" : 1436404183,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "210.101.64.0/18"
         },
         "ip" : "210.101.109.75",
         "ipv6" : "false",
         "latitude" : "35.9616",
         "location" : "35.9616,128.5413",
         "longitude" : "128.5413",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "SonicOS",
         "osvendor" : "SonicWall",
         "port" : 4899,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "Found",
         "seen_date" : "2024-11-04",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "210.101.64.0/18",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 221.153.131.23:4899 (tcp/http) - last seen on 2024-11-03 at 12:51:18 UTC

    • IP
      221.153.131.23
      Network
      221.152.0.0/14
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      SonicWall SonicOS
      URL

      http://221.153.131.23:4899/ 302

      HTTP Title
      Policy Jump
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      SonicWall SonicOS
      HTTP Component(s)
      SonicWall SonicWall
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      8332030c845aaae05eb386bea74678a0
      HTTP Header MD5
      abacb902cd555996ea7c81367d39d2cf
      HTTP Body MD5
      7f437575f8c2fc5ea0b8a911e38bf0f9
    • HTTP/1.0 302 Found
      Content-type: text/html
      X-Content-Type-Options: nosniff
      Location: https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
      <html>
      <head><meta http-equiv="Content-Type" content="text/html; charset=utf-8">
      
      	<title>Policy Jump</title>
      	<meta name="id" content="policyJump" >
      	<meta http-equiv="Expires" content="0">
      </head>
      <BODY>This document has moved <A href="https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0">here</A></BODY>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-03T12:51:18.000Z",
         "app" : {
            "extract" : {
               "ip" : [
                  "210.101.110.254"
               ],
               "url" : [
                  "https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0"
               ]
            },
            "http" : {
               "bodymd5" : "7f437575f8c2fc5ea0b8a911e38bf0f9",
               "bodymmh3" : -626897434,
               "component" : [
                  {
                     "productvendor" : "SonicWall",
                     "product" : "SonicWall"
                  }
               ],
               "headermd5" : "abacb902cd555996ea7c81367d39d2cf",
               "headermmh3" : -109501120,
               "title" : "Policy Jump"
            },
            "length" : 547
         },
         "asn" : "AS4766",
         "city" : "Suwon",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 302 Found\r\nContent-type: text/html\r\nX-Content-Type-Options: nosniff\r\nLocation: https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\">\r\n<html>\r\n<head><meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">\r\n\r\n\t<title>Policy Jump</title>\r\n\t<meta name=\"id\" content=\"policyJump\" >\r\n\t<meta http-equiv=\"Expires\" content=\"0\">\r\n</head>\r\n<BODY>This document has moved <A href=\"https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0\">here</A></BODY>\r\n</html>\r\n",
         "datamd5" : "8332030c845aaae05eb386bea74678a0",
         "datammh3" : 1436404183,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "221.152.0.0/14"
         },
         "ip" : "221.153.131.23",
         "ipv6" : "false",
         "latitude" : "37.2608",
         "location" : "37.2608,127.0281",
         "longitude" : "127.0281",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "SonicOS",
         "osvendor" : "SonicWall",
         "port" : 4899,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "Found",
         "seen_date" : "2024-11-03",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "221.152.0.0/14",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 221.153.131.35:4899 (tcp/http) - last seen on 2024-11-01 at 02:37:03 UTC

    • IP
      221.153.131.35
      Network
      221.152.0.0/14
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      SonicWall SonicOS
      URL

      http://221.153.131.35:4899/ 302

      HTTP Title
      Policy Jump
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      SonicWall SonicOS
      HTTP Component(s)
      SonicWall SonicWall
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      8332030c845aaae05eb386bea74678a0
      HTTP Header MD5
      abacb902cd555996ea7c81367d39d2cf
      HTTP Body MD5
      7f437575f8c2fc5ea0b8a911e38bf0f9
    • HTTP/1.0 302 Found
      Content-type: text/html
      X-Content-Type-Options: nosniff
      Location: https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
      <html>
      <head><meta http-equiv="Content-Type" content="text/html; charset=utf-8">
      
      	<title>Policy Jump</title>
      	<meta name="id" content="policyJump" >
      	<meta http-equiv="Expires" content="0">
      </head>
      <BODY>This document has moved <A href="https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0">here</A></BODY>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-01T02:37:03.000Z",
         "app" : {
            "extract" : {
               "ip" : [
                  "210.101.110.254"
               ],
               "url" : [
                  "https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0"
               ]
            },
            "http" : {
               "bodymd5" : "7f437575f8c2fc5ea0b8a911e38bf0f9",
               "bodymmh3" : -626897434,
               "component" : [
                  {
                     "product" : "SonicWall",
                     "productvendor" : "SonicWall"
                  }
               ],
               "headermd5" : "abacb902cd555996ea7c81367d39d2cf",
               "headermmh3" : -109501120,
               "title" : "Policy Jump"
            },
            "length" : 547
         },
         "asn" : "AS4766",
         "city" : "Suwon",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 302 Found\r\nContent-type: text/html\r\nX-Content-Type-Options: nosniff\r\nLocation: https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\">\r\n<html>\r\n<head><meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">\r\n\r\n\t<title>Policy Jump</title>\r\n\t<meta name=\"id\" content=\"policyJump\" >\r\n\t<meta http-equiv=\"Expires\" content=\"0\">\r\n</head>\r\n<BODY>This document has moved <A href=\"https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0\">here</A></BODY>\r\n</html>\r\n",
         "datamd5" : "8332030c845aaae05eb386bea74678a0",
         "datammh3" : 1436404183,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "221.152.0.0/14"
         },
         "ip" : "221.153.131.35",
         "ipv6" : "false",
         "latitude" : "37.2608",
         "location" : "37.2608,127.0281",
         "longitude" : "127.0281",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "SonicOS",
         "osvendor" : "SonicWall",
         "port" : 4899,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "Found",
         "seen_date" : "2024-11-01",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "221.152.0.0/14",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 59.6.54.57:4899 (tcp/http) - last seen on 2024-11-01 at 02:20:05 UTC

    • IP
      59.6.54.57
      Network
      59.6.0.0/16
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://59.6.54.57:4899/ 302

      HTTP Title
      302 Found
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      1f0e364266199c805daf3be0051a4cbf
      HTTP Header MD5
      42414f746374daddb06c5613baaecf43
      HTTP Body MD5
      29b5f7615598c74df0019844c163d80c
    • HTTP/1.1 302 Moved Temporarily
      Server: nginx
      Date: Fri, 01 Nov 2024 02:20:05 GMT
      Content-Type: text/html
      Content-Length: 138
      Connection: close
      Location: http://<ip>:4899/ui/
      Strict-Transport-Security: max-age=0; includeSubDomains; preload
      X-Content-Type-Options: nosniff
      X-XSS-Protection: 1; mode=block
      Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
      Referrer-Policy: strict-origin
      X-Frame-Options: SAMEORIGIN
      
      <html>
      <head><title>302 Found</title></head>
      <body>
      <center><h1>302 Found</h1></center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-01T02:20:05.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "29b5f7615598c74df0019844c163d80c",
               "bodymmh3" : -23674247,
               "headermd5" : "42414f746374daddb06c5613baaecf43",
               "headermmh3" : -1194998032,
               "title" : "302 Found"
            },
            "length" : 652
         },
         "asn" : "AS4766",
         "city" : "Seongdong-gu",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 01 Nov 2024 02:20:05 GMT\r\nContent-Type: text/html\r\nContent-Length: 138\r\nConnection: close\r\nLocation: http://<ip>:4899/ui/\r\nStrict-Transport-Security: max-age=0; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nPermissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nReferrer-Policy: strict-origin\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n<html>\r\n<head><title>302 Found</title></head>\r\n<body>\r\n<center><h1>302 Found</h1></center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "1f0e364266199c805daf3be0051a4cbf",
         "datammh3" : -1524090877,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "59.6.0.0/16"
         },
         "ip" : "59.6.54.57",
         "ipv6" : "false",
         "latitude" : "37.5639",
         "location" : "37.5639,127.0188",
         "longitude" : "127.0188",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4899,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Moved Temporarily",
         "seen_date" : "2024-11-01",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "59.6.0.0/16",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 221.153.131.28:4899 (tcp/http) - last seen on 2024-10-27 at 04:43:14 UTC

    • IP
      221.153.131.28
      Network
      221.152.0.0/14
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      SonicWall SonicOS
      URL

      http://221.153.131.28:4899/ 302

      HTTP Title
      Policy Jump
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      SonicWall SonicOS
      HTTP Component(s)
      SonicWall SonicWall
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      8332030c845aaae05eb386bea74678a0
      HTTP Header MD5
      abacb902cd555996ea7c81367d39d2cf
      HTTP Body MD5
      7f437575f8c2fc5ea0b8a911e38bf0f9
    • HTTP/1.0 302 Found
      Content-type: text/html
      X-Content-Type-Options: nosniff
      Location: https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
      <html>
      <head><meta http-equiv="Content-Type" content="text/html; charset=utf-8">
      
      	<title>Policy Jump</title>
      	<meta name="id" content="policyJump" >
      	<meta http-equiv="Expires" content="0">
      </head>
      <BODY>This document has moved <A href="https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0">here</A></BODY>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-10-27T04:43:14.000Z",
         "app" : {
            "extract" : {
               "ip" : [
                  "210.101.110.254"
               ],
               "url" : [
                  "https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0"
               ]
            },
            "http" : {
               "bodymd5" : "7f437575f8c2fc5ea0b8a911e38bf0f9",
               "bodymmh3" : -626897434,
               "component" : [
                  {
                     "product" : "SonicWall",
                     "productvendor" : "SonicWall"
                  }
               ],
               "headermd5" : "abacb902cd555996ea7c81367d39d2cf",
               "headermmh3" : -109501120,
               "title" : "Policy Jump"
            },
            "length" : 547
         },
         "asn" : "AS4766",
         "city" : "Ansan-si",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 302 Found\r\nContent-type: text/html\r\nX-Content-Type-Options: nosniff\r\nLocation: https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\">\r\n<html>\r\n<head><meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">\r\n\r\n\t<title>Policy Jump</title>\r\n\t<meta name=\"id\" content=\"policyJump\" >\r\n\t<meta http-equiv=\"Expires\" content=\"0\">\r\n</head>\r\n<BODY>This document has moved <A href=\"https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0\">here</A></BODY>\r\n</html>\r\n",
         "datamd5" : "8332030c845aaae05eb386bea74678a0",
         "datammh3" : 1436404183,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "221.152.0.0/14"
         },
         "ip" : "221.153.131.28",
         "ipv6" : "false",
         "latitude" : "37.3253",
         "location" : "37.3253,126.8178",
         "longitude" : "126.8178",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "SonicOS",
         "osvendor" : "SonicWall",
         "port" : 4899,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "Found",
         "seen_date" : "2024-10-27",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "221.152.0.0/14",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 210.101.109.70:4899 (tcp/http) - last seen on 2024-10-27 at 04:07:56 UTC

    • IP
      210.101.109.70
      Network
      210.101.64.0/18
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      SonicWall SonicOS
      URL

      http://210.101.109.70:4899/ 302

      HTTP Title
      Policy Jump
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      SonicWall SonicOS
      HTTP Component(s)
      SonicWall SonicWall
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      8332030c845aaae05eb386bea74678a0
      HTTP Header MD5
      abacb902cd555996ea7c81367d39d2cf
      HTTP Body MD5
      7f437575f8c2fc5ea0b8a911e38bf0f9
    • HTTP/1.0 302 Found
      Content-type: text/html
      X-Content-Type-Options: nosniff
      Location: https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
      <html>
      <head><meta http-equiv="Content-Type" content="text/html; charset=utf-8">
      
      	<title>Policy Jump</title>
      	<meta name="id" content="policyJump" >
      	<meta http-equiv="Expires" content="0">
      </head>
      <BODY>This document has moved <A href="https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0">here</A></BODY>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-10-27T04:07:56.000Z",
         "app" : {
            "extract" : {
               "ip" : [
                  "210.101.110.254"
               ],
               "url" : [
                  "https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0"
               ]
            },
            "http" : {
               "bodymd5" : "7f437575f8c2fc5ea0b8a911e38bf0f9",
               "bodymmh3" : -626897434,
               "component" : [
                  {
                     "productvendor" : "SonicWall",
                     "product" : "SonicWall"
                  }
               ],
               "headermd5" : "abacb902cd555996ea7c81367d39d2cf",
               "headermmh3" : -109501120,
               "title" : "Policy Jump"
            },
            "length" : 547
         },
         "asn" : "AS4766",
         "city" : "Buk-gu",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 302 Found\r\nContent-type: text/html\r\nX-Content-Type-Options: nosniff\r\nLocation: https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\">\r\n<html>\r\n<head><meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">\r\n\r\n\t<title>Policy Jump</title>\r\n\t<meta name=\"id\" content=\"policyJump\" >\r\n\t<meta http-equiv=\"Expires\" content=\"0\">\r\n</head>\r\n<BODY>This document has moved <A href=\"https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0\">here</A></BODY>\r\n</html>\r\n",
         "datamd5" : "8332030c845aaae05eb386bea74678a0",
         "datammh3" : 1436404183,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "210.101.64.0/18"
         },
         "ip" : "210.101.109.70",
         "ipv6" : "false",
         "latitude" : "35.9616",
         "location" : "35.9616,128.5413",
         "longitude" : "128.5413",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "SonicOS",
         "osvendor" : "SonicWall",
         "port" : 4899,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "Found",
         "seen_date" : "2024-10-27",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "210.101.64.0/18",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 59.6.54.57:4899 (tcp/http) - last seen on 2024-10-26 at 18:50:29 UTC

    • IP
      59.6.54.57
      Network
      59.6.0.0/16
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://59.6.54.57:4899/ 302

      HTTP Title
      302 Found
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      1f0e364266199c805daf3be0051a4cbf
      HTTP Header MD5
      42414f746374daddb06c5613baaecf43
      HTTP Body MD5
      29b5f7615598c74df0019844c163d80c
    • HTTP/1.1 302 Moved Temporarily
      Server: nginx
      Date: Sat, 26 Oct 2024 18:50:29 GMT
      Content-Type: text/html
      Content-Length: 138
      Connection: close
      Location: http://<ip>:4899/ui/
      Strict-Transport-Security: max-age=0; includeSubDomains; preload
      X-Content-Type-Options: nosniff
      X-XSS-Protection: 1; mode=block
      Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
      Referrer-Policy: strict-origin
      X-Frame-Options: SAMEORIGIN
      
      <html>
      <head><title>302 Found</title></head>
      <body>
      <center><h1>302 Found</h1></center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-10-26T18:50:29.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "29b5f7615598c74df0019844c163d80c",
               "bodymmh3" : -23674247,
               "headermd5" : "42414f746374daddb06c5613baaecf43",
               "headermmh3" : -1330728260,
               "title" : "302 Found"
            },
            "length" : 652
         },
         "asn" : "AS4766",
         "city" : "Seongdong-gu",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 26 Oct 2024 18:50:29 GMT\r\nContent-Type: text/html\r\nContent-Length: 138\r\nConnection: close\r\nLocation: http://<ip>:4899/ui/\r\nStrict-Transport-Security: max-age=0; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nPermissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nReferrer-Policy: strict-origin\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n<html>\r\n<head><title>302 Found</title></head>\r\n<body>\r\n<center><h1>302 Found</h1></center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "1f0e364266199c805daf3be0051a4cbf",
         "datammh3" : -1524090877,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "59.6.0.0/16"
         },
         "ip" : "59.6.54.57",
         "ipv6" : "false",
         "latitude" : "37.5639",
         "location" : "37.5639,127.0188",
         "longitude" : "127.0188",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4899,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Moved Temporarily",
         "seen_date" : "2024-10-26",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "59.6.0.0/16",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 221.153.131.35:4899 (tcp/http) - last seen on 2024-10-26 at 05:57:37 UTC

    • IP
      221.153.131.35
      Network
      221.152.0.0/14
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      SonicWall SonicOS
      URL

      http://221.153.131.35:4899/ 302

      HTTP Title
      Policy Jump
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      SonicWall SonicOS
      HTTP Component(s)
      SonicWall SonicWall
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      8332030c845aaae05eb386bea74678a0
      HTTP Header MD5
      abacb902cd555996ea7c81367d39d2cf
      HTTP Body MD5
      7f437575f8c2fc5ea0b8a911e38bf0f9
    • HTTP/1.0 302 Found
      Content-type: text/html
      X-Content-Type-Options: nosniff
      Location: https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
      <html>
      <head><meta http-equiv="Content-Type" content="text/html; charset=utf-8">
      
      	<title>Policy Jump</title>
      	<meta name="id" content="policyJump" >
      	<meta http-equiv="Expires" content="0">
      </head>
      <BODY>This document has moved <A href="https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0">here</A></BODY>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-10-26T05:57:37.000Z",
         "app" : {
            "extract" : {
               "ip" : [
                  "210.101.110.254"
               ],
               "url" : [
                  "https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0"
               ]
            },
            "http" : {
               "bodymd5" : "7f437575f8c2fc5ea0b8a911e38bf0f9",
               "bodymmh3" : -626897434,
               "component" : [
                  {
                     "product" : "SonicWall",
                     "productvendor" : "SonicWall"
                  }
               ],
               "headermd5" : "abacb902cd555996ea7c81367d39d2cf",
               "headermmh3" : -109501120,
               "title" : "Policy Jump"
            },
            "length" : 547
         },
         "asn" : "AS4766",
         "city" : "Ansan-si",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 302 Found\r\nContent-type: text/html\r\nX-Content-Type-Options: nosniff\r\nLocation: https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\">\r\n<html>\r\n<head><meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">\r\n\r\n\t<title>Policy Jump</title>\r\n\t<meta name=\"id\" content=\"policyJump\" >\r\n\t<meta http-equiv=\"Expires\" content=\"0\">\r\n</head>\r\n<BODY>This document has moved <A href=\"https://210.101.110.254:1443/dynPolLoginRedirect.html?cid=0\">here</A></BODY>\r\n</html>\r\n",
         "datamd5" : "8332030c845aaae05eb386bea74678a0",
         "datammh3" : 1436404183,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "221.152.0.0/14"
         },
         "ip" : "221.153.131.35",
         "ipv6" : "false",
         "latitude" : "37.3253",
         "location" : "37.3253,126.8178",
         "longitude" : "126.8178",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "SonicOS",
         "osvendor" : "SonicWall",
         "port" : 4899,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "Found",
         "seen_date" : "2024-10-26",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "221.152.0.0/14",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }